The NSW Department of Primary Industry and Regional Development (DPIRD) has issued a tender seeking to implement a business systems assurance (BSA) platform.
The platform will serve as a centralised assurance framework allowing the DPIRD to demonstrate compliance, manage risk, and maintain accountability across its systems.
The proposed solution must support multiple assurance domains, integrate with existing systems, and provide comprehensive reporting capabilities for annual attestation requirements, as well as providing an intuitive, accessible interface for non-technical users, who may only access the solution sporadically.
Scope for the system includes a centralised view of compliance across all systems, automated or streamlined attestation reporting, integrated risk visibility, and an evidence repository for audits.
Core module requirements include a system or asset repository integrating with LeanIX or an equivalent, control framework and mapping, as well as risk registers and treatment tracking.
It must also provide risk, system, vendor, records and compliance management; cybersecurity; and AI governance.
Technical requirements include features such as SSO integration, MFA support, RBAC, data encryption at rest and in transit and audit logging of all activities.
Australian data residency is required, while a cloud-hosted solution is preferred; a 99.9% uptime SLA and disaster recovery and backup capabilities are also required.
The tender closes on 3:00PM on 3 August, with a decision estimated to be made on 21 August.
Last year, the DPIRD announced it was seeking cyber security analyst services to support the development and implementation of an IT security framework.
The DPIRD's work supports the agriculture, forestry, fishing and mining industries, regional businesses and the management of the state's natural assets.
.jpg&h=142&w=230&c=1&s=1)
.jpg&w=100&c=1&s=0){kind=logo}
.jpg&w=100&c=1&s=0)
.jpg&w=100&c=1&s=0)
